Is Cisco Umbrella down?

We are investigating an issue affecting Cisco Umbrella customers with DNS policies configured to block the "M365 Copilot" and "Microsoft Copilot" application categories. Affected customers may experience access issues with some Microsoft 365 services, including Outlook and Office applications, where related Microsoft hostnames may be matched to these Copilot application categories and blocked by policy. As a workaround, customers experiencing this issue can temporarily remove or allow the "M365 Copilot" and "Microsoft Copilot" application category blocks in their DNS policy. Customers should review any policy changes against their organization’s security requirements. Our engineering teams are actively investigating. Updates and additional details will be provided as new information becomes available. We appreciate your patience and understanding during this time.

We have identified the issue and are currently mitigating the impact. The previously provided workaround remains available for customers experiencing access issues with Microsoft 365 services. Customers may temporarily remove or allow the "M365 Copilot" and "Microsoft Copilot" application category blocks in their DNS policy, after reviewing the change against their organization’s security requirements. Updates and additional details will be provided as new information becomes available.

This issue has been resolved. Cisco Umbrella customers with DNS policies configured to block the "M365 Copilot" or "Microsoft Copilot" application categories should no longer experience related access issues with Microsoft 365 services. Customers who applied the previously provided workaround can review and restore their DNS policy settings as appropriate for their organization’s security requirements. Thank you for your patience. If you continue to experience issues, please contact Cisco Customer Support.

We are currently investigating a critical issue affecting network infrastructure services globally. Customers may experience connectivity or access issues during this period. Our engineering teams are actively working to identify the root cause and restore full service as quickly as possible. We are coordinating across all relevant teams to ensure a swift resolution. Updates and additional details will be provided as new information becomes available. Thank you for your patience and understanding. We're Here to Help If you have any questions, please contact our support team. Thank you for your understanding as we improve your Cisco Secure Access experience.

We continue to investigate the global network infrastructure issue. Our infrastructure provider is working on stabilizing their systems, and we are monitoring the situation closely. We are seeing intermittent recovery attempts, and service may be unstable during this time. Our teams remain engaged with our infrastructure provider and are working toward full service restoration. We will provide another update if there is significant progress. Thank you for your continued patience.

The network infrastructure issue affecting Cisco Umbrella and Cisco Secure Connect services globally has been resolved as of 13:03 UTC. All services are now healthy and operating normally. Customers should experience full connectivity and access across all regions. We apologize for any inconvenience caused and thank you for your patience. We're Here to Help If you have any questions, please contact our support team. Thank you for your understanding as we improve your Cisco Secure Access experience.

This incident has been resolved.

We are investigating reports of certificate errors affecting some Cisco Umbrella customers using HTTPS inspection in the Los Angeles and Miami regions. Affected customers may experience certificate warnings or errors when accessing certain websites or applications inspected by Cisco Umbrella. Our engineering teams are actively investigating and gathering additional diagnostic information. Updates and additional details will be provided as new information becomes available. We appreciate your patience and understanding during this time.

This issue has been resolved. Cisco Umbrella customers using HTTPS inspection in the Los Angeles and Miami regions should no longer experience certificate warnings or errors when accessing websites or applications inspected by Cisco Umbrella. Thank you for your patience. If you continue to experience issues, please contact Cisco Customer Support.

We are investigating an issue where some links on the Umbrella Overview dashboard page may not direct customers to the expected Activity page. A fix is currently in progress. Updates and additional details will be provided as new information becomes available. We appreciate your patience and understanding during this time.

This issue has been resolved. Metric links on the Umbrella Overview dashboard page are now directing customers to the expected Activity page. Thank you for your patience. If you continue to experience issues, please contact Cisco Customer Support.

Customers may experience issues with policy processing for ZTA traffic, ZTNA enrollment, policy updates, and configuration changes, which could result in issues accessing Private Resources. New policy creation, new user connections, and management operations may also be affected. Existing configurations remain in place, and ongoing traffic processing is not expected to be impacted unless it requires the affected policy processing.

In addition to the previously communicated impact, customers using SCIM provisioning from Microsoft Entra ID (Azure AD), Okta, or Duo may experience failures synchronizing users and groups to Umbrella. As a result, new users, group membership changes, and identity updates will not be reflected until synchronization is restored. Existing policies and traffic enforcement for previously synchronized identities are not expected to be affected.

Mitigation actions have been completed, and the affected Umbrella services are recovering. Policy processing, policy updates, configuration changes, SCIM provisioning, DLP policy propagation, and DLP reporting event processing are returning to normal operation. We are continuing to monitor service stability to ensure a full recovery.

Mitigation actions have been completed, and Umbrella services are operating normally. We're Here to Help If you have any questions or need assistance, please contact our support team.